Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/463bf7ed-66c7-3ae8-854d-80c8af425eef.roa
File:                     463bf7ed-66c7-3ae8-854d-80c8af425eef.roa (raw, json)
Hash identifier:          HzUFH9VIJlAQ95JX+UDhC/gT0TI2gW5xmtiJpdETylE=
Subject key identifier:   06:13:0B:4D:4F:45:17:98:68:DE:0B:5D:FA:41:04:0C:4A:B5:00:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D47C4EC4D89073E00B72CE500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/463bf7ed-66c7-3ae8-854d-80c8af425eef.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        174.250.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:ec:4d:89:07:3e:00:b7:2c:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=f7193ee2-d3c9-47ae-a378-21d14bb65275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f0:97:3f:e9:dc:a0:27:35:24:e6:96:68:10:
                    10:5f:27:59:46:46:b6:b6:91:f7:01:be:17:0b:73:
                    e2:e6:81:2f:20:b5:4b:bd:2f:bf:67:bf:ac:c2:d1:
                    46:4a:c4:2e:b1:e5:88:ef:86:c1:82:45:ce:38:4b:
                    ab:a3:e7:42:2f:d0:6c:aa:66:04:2e:7c:d3:88:0a:
                    2c:f3:55:36:06:3d:77:f1:a1:9f:7f:a5:92:61:cf:
                    b5:6d:6b:4c:5c:4a:e3:95:63:5a:e2:18:b3:c1:1f:
                    84:55:2b:52:a9:1b:25:85:e1:f1:1f:6c:d9:97:5c:
                    83:64:7e:ab:e3:1f:c4:3d:3c:0b:9f:70:87:66:38:
                    6e:75:56:45:f6:7d:87:1f:19:56:62:97:fd:61:82:
                    4c:0f:8d:80:64:76:f5:77:71:51:72:0c:3c:1a:e7:
                    ca:62:db:a1:77:d8:e1:a3:c9:94:86:8f:50:5b:d7:
                    ab:15:a4:23:00:40:7c:6c:fc:bf:d5:f1:6c:8d:ee:
                    33:c5:19:bf:7f:8a:6b:ec:68:a0:45:07:1e:f5:8c:
                    8b:5a:e9:4c:b9:91:b2:cd:1d:5f:90:21:87:02:88:
                    f7:d5:13:bb:c9:a3:fa:fc:7b:01:bf:15:4b:0d:32:
                    53:da:20:4f:6c:da:01:3e:33:c7:58:9d:69:73:66:
                    00:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:13:0B:4D:4F:45:17:98:68:DE:0B:5D:FA:41:04:0C:4A:B5:00:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/463bf7ed-66c7-3ae8-854d-80c8af425eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:66:da:91:a5:15:51:51:15:06:a1:e5:e1:76:88:fd:eb:27:
         d4:7d:f7:a9:c9:62:b1:21:31:e8:2e:5d:a2:80:e4:d9:91:18:
         21:e7:1a:bd:d3:ee:15:66:aa:49:d8:48:e9:4a:87:c7:a8:e2:
         00:d2:d4:72:07:d1:12:da:c7:e3:ed:f5:08:69:52:78:0a:68:
         1e:d9:92:9c:30:08:c1:fc:b7:fb:79:ff:ad:a7:73:03:65:f8:
         e0:ce:cb:8d:b3:8f:16:db:a4:3a:f2:2c:0d:39:ce:59:0d:c1:
         2b:eb:74:ba:dd:78:7d:d3:24:1a:77:99:39:01:7d:57:0b:e3:
         11:b4:bc:5d:c8:c8:64:fc:94:23:47:9b:b3:85:ed:b7:49:8a:
         a2:da:ab:78:c9:76:7e:b7:61:e5:d4:a5:ee:ac:34:7f:5a:c4:
         46:b2:93:51:87:37:0b:79:82:83:4c:5b:bd:85:a7:2e:7e:9a:
         7c:b6:69:a8:fa:1f:f4:e7:b6:89:64:bd:ca:9a:fc:e5:16:c4:
         79:10:9f:68:25:5e:7b:bb:bb:61:83:46:b0:a2:b0:61:aa:e2:
         bf:88:b4:6e:94:74:6e:c5:2f:b5:d4:89:06:ff:2e:ff:2d:5d:
         a3:77:c1:e4:6d:ef:1a:9e:f6:18:3f:4a:9b:c3:7b:13:f3:b8:
         35:41:14:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:51:23 2026 by rpki-client